This phishing message to our CEO made it past multiple spam filters somehow, but two of my text-matching O365 Exchange Transport rules caught it and tagged it and alerted me, and a third rule silently alerted me. 100% custom-built, in-house by me.